Forum Discussion

ClasseJohansson's avatar
ClasseJohansson
Copper Contributor
Mar 03, 2019

Windows Server 2019 Fresh Active Directory Promotion Bugs

Hi Everyone, Anyone having issue with a fresh domain controller promotion issue? I've found quite a number of users mention about Start Menu unable to change after promoting the server to a domain c...
Active Directory
windows server
doktornotor's avatar
doktornotor
Copper Contributor
Mar 12, 2019

The "fix" is to turn on UAC admin approval mode. AFAICT, this was never fixed in 2016, so hardly surprising it's still buggy in 2019. Shame on you, MS. :(

 

Apply this to Domain Controllers via GPO:

 

Policies -> Windows Settings -> Security Settings -> Local Policies/Security Options -> User Account Control
Admin Approval Mode for the Built-in Administrator account: Enabled
Allow UIAccess applications to prompt for elevation without using the secure desktop: Enabled
Behavior of the elevation prompt for administrators in Admin Approval Mode: Elevate without prompting